Adware.SpecialSearchOffer removal tips

The Adware.SpecialSearchOffer is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Adware.SpecialSearchOffer virus can do?

Presents an Authenticode digital signature
Unconventionial language used in binary resources: Greek

How to determine Adware.SpecialSearchOffer?


File Info:
crc32: 235BE6E3
md5: 8d81cbd363b8d21fcb54155004300587
name: 8D81CBD363B8D21FCB54155004300587.mlw
sha1: cd8a03331dd192ee42908e7f3da957ea9403339b
sha256: 1a0bd81891e667d6e553ec1e3522d4a140eca80e18e8e90425893946bdf7416d
sha512: d6b95ff0df569c979d03c56081bd40d9faed4349744f13cb22651a1482c993f0499cd08a2a2d43d43b72fac39e8f32e4e9687a40e058fe9953d0263353ec4170
ssdeep: 12288:1qS9oalqK27xsB2yqOQCJZ2wasKYEs8GjPx9E1PJogFvyVSA8:3dqK276lkCJAJsXEs8QedZyVH8
type: PE32+ executable (console) x86-64, for MS Windows

Version Info:
LegalCopyright: DiamondEcho LLC. 2018
InternalName: diamondecho.exe
FileVersion: 1.0.0.1
CompanyName: DiamondEcho LLC.
ProductName: DiamondEcho
ProductVersion: 1.0.0.1
FileDescription: DiamondEcho
OriginalFilename: diamondecho.exe
Translation: 0x0408 0x04b0

Adware.SpecialSearchOffer also known as:

Lionic	Riskware.Win32.Razy.1!c
Elastic	malicious (high confidence)
DrWeb	Adware.Searcher.3268
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Application.BitCoinMiner.IdleBuddy.2
Zillya	Adware.OpenSUpdater.Win64.182
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	AdWare:Win64/OpenSUpdater.bbb24627
Cybereason	malicious.363b8d
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win64/Adware.OpenSUpdater.AA
APEX	Malicious
Avast	Win64:AdwareX-gen [Adw]
BitDefender	Gen:Variant.Application.BitCoinMiner.IdleBuddy.2
NANO-Antivirus	Riskware.Win64.Searcher.flnzex
MicroWorld-eScan	Gen:Variant.Application.BitCoinMiner.IdleBuddy.2
Tencent	Malware.Win32.Gencirc.10cc84c7
Ad-Aware	Gen:Variant.Application.BitCoinMiner.IdleBuddy.2
Sophos	Generic PUA MN (PUA)
Comodo	ApplicUnwnt@#2uyan03ioswzz
McAfee-GW-Edition	Trojan-FQJJ!8D81CBD363B8
FireEye	Generic.mg.8d81cbd363b8d21f
Emsisoft	Gen:Variant.Application.BitCoinMiner.IdleBuddy.2 (B)
SentinelOne	Static AI – Malicious PE
Webroot	W32.Adware.Gen
Avira	HEUR/AGEN.1108436
Microsoft	PUA:Win32/Bitrepeyp.B
GData	Gen:Variant.Application.BitCoinMiner.IdleBuddy.2
AhnLab-V3	Malware/RL.Generic.R253705
Acronis	suspicious
McAfee	Trojan-FQJJ!8D81CBD363B8
MAX	malware (ai score=71)
Malwarebytes	Adware.SpecialSearchOffer
Panda	Trj/CI.A
Yandex	Trojan.GenAsa!ZjrOb3bh1EA
Ikarus	AdWare.Opensupdater
Fortinet	Adware/OpenSUpdater
AVG	Win64:AdwareX-gen [Adw]
Paloalto	generic.ml

How to remove Adware.SpecialSearchOffer?

Adware.SpecialSearchOffer removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X